Re: [PATCH v2 15/17] crypto: concatenate fit development certificate with private key

[Jonas Rebmann <jre@pengutronix.de>]

Hi Sascha,

On 2025-11-03 11:08, Sascha Hauer wrote:
> On Tue, Oct 28, 2025 at 07:03:20PM +0100, Jonas Rebmann wrote:
>> Merge the exemplary keys copied in from [1] into a single pem file,
>> in a manner similar to test/self/development_rsa2048.pem for consistency
>> and to reduce clutter a bit.
>>
>> While at it, rename them from "fit-" to "snakeoil-" as they are not only
>> used for fit, but also for tlv integration tests, and to indicate more
>> clearly that these are publicly known keys.
> 
> Should we rather keep the "fit" name and add another key for tlv
> integration tests?

I'd rather not add more 'compromised' keys to the repo. What would be
the gain?

I think naming it snakeoil gives it the warning it deserves. We should
make it hard for anyone to confuse our CI/Development keys with their
production keys.

Ahmad was concerned about cluttering the repo with keys I think, that's
why he asked me to concatenated public key and certificate here.

Regards,
Jonas

-- 
Pengutronix e.K.                           | Jonas Rebmann               |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-9    |